RECOMMENDATIONS The Global Cyber Security Capacity Centre offers the following recommendations for consideration by the Government of the Republic of Iceland. These recommendations provide advice and steps aimed to increase existing cybersecurity capacity as per the considerations of the GCSCC Cybersecurity Capacity Maturity Model. Recommendations (R1.1 etc.) are grouped according to the respective factor. NATIONAL CYBERSECURITY STRATEGY R1.1 Ensure that the National Cybersecurity Strategy content includes, at a minimum: explicit links to national risks, priorities, objectives, and business development, raising public awareness, mitigating cybercrime, and protecting critical infrastructure from external and internal threats. R1.2 Encourage the promotion and implementation of the National Cybersecurity Strategy by multiple stakeholders across government and other sectors. R1.3 Administer a discrete cybersecurity budget line in order to allocate and manage resources. R1.4 Conduct regular scenario and real-time cyber exercises that provide a concurrent picture of national cyber resilience. R1.5 Collect and evaluate relevant metrics, monitoring processes and data in order to inform decision-making. R1.6 Include in the NCSS provision for the protection of critical infrastructure from insider threats. INCIDENT RESPONSE RR1.7 Develop an operational central registry of national level cybersecurity incidents and implement guidelines of the GDPR and the NIS. 27 | Cybersecurity Capacity Review Iceland, 2017